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DECLARATION OF PRIOR INVENTION UNDER 37 C.F.R. § 1.131 

We, Ahmed El-Sayed Ahmed and Issa Traore, declare that we are tlie inventors of the 
subject matter recited in pending claims 1-5, 7-12, 14 and 19-31 of the referenced application. 
"We declare that the respective subject matter of the pending claims was reduced to practice 
before April 2, 2003. In support of this declaration, we allege the following facts; 

1 . Exhibit A is a PowerPoint presentation describing the behavioral biometrics- 
based user verification system for use with a mouse input device constructed and tested for its 
intended purpose by Ahmed El-Sayed Ahmed and Issa Traore. Also described in the 
presentation are associated verification methods performed and tested for their intended 

purposes. The presentation was prepared before April 2, 2003, and thus the inventions described 

in the presentation were made before April 2, 2003. 

2. Before April 2, 2003, a behavioral biometrics-based user verification system for 
use with a mouse input device having the features of claim 1 as recited in the referenced 
application existed and worked for its intended purpose (see Exhibit A). In particular, the system 
made and tested before April 2, 2003, comprised: a data interception tmit configured to intercept 
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inputs from a user that are directed to an application other than a user authentication application 
(see, e.g., slides 12 and 27), wherein the data interception unit is configured to passively collect 
at least one of mouse movement data, mouse point and click data, and mouse drag and drop data 
generated in response to usage of the mouse in providing input to the application other than the 
user authentication application (see, e.g., slide 4); a behavior analysis unit operatively coupled to 
said data interception miit to receive the passively collected mouse data (see, e.g., slides 11,12 
and 14-18) and a behavior comparison unit operatively coupled to said behavior analysis unit 
(see, e.g., the User Identification Stage shown and described at, e.g., slides 12, 18-25) wherein 
said system dynamically monitors and passively collects behavioral biomctric information, and 
translates said behavioral biometric information into representative data, stores and compares 
different results, and outputs a user identify resuh associated with authorization of the user (see, 
e.g., slides 21-25). 

3. Before April 2, 2003, a user verification system having the features of claim 2 as 
recited in the referenced application existed and worked for it intended purpose (see Exhibit A). 
In particular, the user verification system made and tested before April 2, 2003, comprised the 
user verification system recited above at paragraph 2, wherein said system is suitably configured 
for real-time monitoring (see, e.g., slides 26-27). 

4. Before April 2, 2003, a user verification system having the features of claim 3 as 
recited in the referenced application existed and worked for its intended purpose (see Exhibit A). 
In particular, the user verification system made and tested before April 2, 2003, comprised the 
user verification system recited above at paragraph 2, wherein said data interception unit is 
configured to identify data based on mouse movement between first and second locations, 
wherein movement between the first and second locations is not associated with a mouse click 
(see, e.g., slides 4 and 5). 

5. Before April 2, 2003, a user verification system having the features of claim 4 as 
recited in the referenced application existed and worked for it intended pui-pose (see Exhibit A). 
In particular, the user verification system made and tested before April 2, 2003, comprised the 
user verification system recited above at paragraph 2, wherein said data interception unit is 

Page 2 of 8 



MPG;ejv 03/10/11 TRAIS.in47-ro2J7.US-HATl 



Attorney Reference Number 2847-72452-0 1 
Application Number 10/555,408 



configured to identify data based on mouse movement between first and second locations, 
wherein movement between the first and second locations is not associated with a mouse click 

(see, e.g., slides 4 and 5). 

6. Before April 2, 2003, a user verification system having the features of claim 5 as 
recited in the referenced application existed and worked for it intended purpose (see Exhibit A). 
In particular, the user verification system made and tested before April 2, 2003, comprised the 
user verification system recited above at paragraph 2, wherein said data interception unit is 
further configured to characterize movement based on at least one of average speed, average 
traveled distance, and direction of movement (see, e.g., slide 5). 

7. Before April 2, 2003, a user verification system having the features of claim 7 as 
recited in the referenced application existed and worked for its intended purpose (see Exhibit A). 
In particulai-, the user verification system made and tested before April 2, 2003, comprised the 
user verification system recited above at paragraph 2, wherein said data interception unit is 
fijrther configured to identify action from a mouse as one of drag and drop, point and click, 
mouse movement, and silence such that in use, said system receives data from a mouse (see, e.g., 
slide 4). 

8. Before April 2, 2003, a user verification system having the features of claim 8 as 
recited in the reference application existed and worked for its intended purpose (see Exhibit A). 
In particular, the user verification system made and tested before April 2, 2003, comprised the 
user verification system recited above at paragraph 2, wherein said data interception unit is 
fiirther configured to characterize mouse movement based on at least one of average speed, 
average traveled distance, and direction of movement (see, e.g., slide 5), 

9. Before April 2, 2003, a method of characterizing a user having the features of 
claim 9 as recited in the referenced application existed and worked for its intended purpose (see 

Exhibit A). In particular, the method tested before April 2, 2003 comprised: receiving at least 
one of mouse movement data, mouse point and click data, and mouse drag and drop data 
associated with movement of a computer mouse in supplying data to a user application other 
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than an authentication application (see, e.g., sHde 4); forwarding the received data to the user 
appHcation (see, e.g., slides 26 and 27); passively intercepting at least a portion of the received 
data and forwarding the intercepted portion to a behavioral processing unit (see, e.g., slide 12); 
and processing the intercepted portion so as to develop a signature for a user (see, e.g., slides 14 
and 18). 

1 0. Before April 2, 2003, a method of characterizing a user having the features of 
claim 10 as recited in the referenced application existed and worked for its intended purpose (see 
Exhibit A). In particular, the method tested before April 2, 2003 comprised the method recited 
above at paragraph 9, further comprising comparing the signature with a signature of an 
authorized user (see, e.g., slides 18-25). 

1 1 . Before April 2, 2003 , a method of characterizing a user having the features of 
claim 1 1 as recited in the referenced application existed and worked for its intended purpose (see 
Exliibit A). In particular, the method tested before April 2, 2003 comprised the method recited 
above at paragraph 9, further comprising filtering the data after processing and before developing 
(see, e.g., slides 10-12). 

12. Before April 2, 2003, a method of chai'acterizing a user having the features of 
claim 12 as recited in the referenced application existed and worked for its intended purpose (see 
Exhibit A). In particular, the method tested before April 2, 2003 comprised the method recited 
above at paragraph 9, further comprising processing the data, and deiveloping the signature in 
real-time (see, e.g., slides 26 and 27). 

13. Before April 2, 2003, a method of characterizing a user having the features of 
claim 14 as recited in the referenced application existed and worked for its intended purpose (see 
Exhibit A). In particular, the method tested before April 2, 2003 comprised the method recited 
above at paragraph 9, further comprising characterizing mouse movement based on at least one 
of average speed, average traveled distance, and direction of movement (see, e.g., slide 5). 
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] 4, Before April 2, 2003, a user verification system having the features of claim 1 9 as 
recited in the referenced application existed and worked for its intended purpose (see lixhibit A). 
In particular, the system made and tested before April 2, 2003 comprised the system recited 
above at paragraph 2, wherein the behavior comparison unit is configured to store user identities 
for a plurality of potential users, and the user identity result identifies the user from among the 
plurality of potential users (sec, e.g., slides 19-25). 

1 5 . Before April 2, 2003 , a user verification system having the features of claim 20 as 
recited in the referenced application existed and worked for its intended purpose (see Exhibit A), 
hi particular, the system made and tested before April 2, 2003 comprised the system recited 

above at pai*agraph 2, wherein the behavior comparison unit is configured to produce the user 
identity result based on mouse movement speed compared to traveled distance, average speed 
per direction of movement, a distribution of movement directions, average speed with respect to 
action type, a distribution of actions, a distribution of traveled distance, and a distribution of 
movement elapsed time (see, e.g., slides 4-6 and 28). 

1 6. Before April 2, 2003, a method of characterizing a user having the features of 
claim 21 as recited in the referenced application existed and worked for its intended purpose (see 
Exhibit A). In particular, the method tested before April 2, 2003 comprised the method recited 

above at paragraph 9, wherein the signature for the user is developed based on movement speed 
compared lo traveled distance, average speed per direction of movement, distribution of 
movement directions, average speed with respect to action type, a distribution of actions, a 
distribution of traveled distance, and a distribution of movement elapsed time (see, e.g., slides 4- 
6 and 28). 

17. Before April 2, 2003, a method of characterizing a user having the features of 
claim 22 as recited in the referenced application existed and worked for its intended purpose (see 
Exhibit A). In particular, the method tested before April 2, 2003 comprised the method recited 
above at paragraph 9, wherein the passively collected behavioral biometric data is based on 
mouse movement between first and second locations, wherein movement between the first and 
second locations is not associated with a mouse click (see, e.g., slides 4 and 5). 
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1 8. Before April 2, 2003, a method of characterizing a user having the features of 
claim 23 as recited in the referenced application existed and Avorked for its intended purpose (see 
Exhibit A). In particular, the method tested before April 2, 2003 comprised the method recited 
above at paragraph 9, wherein the behavioral biometric information from the mouse is obtained 
in a background process (see, e.g., slides 3 and 28-28). 

1 9. Before April 2, 2003, a user verification system having the features of claim 24 as 
recited in the referenced application existed and worked for its intended purpose (see Exhibit A). 
In particular, the system made and tested before April 2, 2003 comprised the system recited 

above at paragraph 2, wherein the behavior analysis unit is configui-ed to establish a user 
signature based on a plurality of sessions in an enrollment mode (see, e.g., slides 16-25). 

20. Before April 2, 2003, a behavioral biometrics-based use verification system for 
use with a mouse input device having the features of claim 25 as recited in the referenced 
application existed and worked for its intended purpose (see Exhibit A). In particular, the system 
made and tested before April 2, 2003, comprised: a data interception unit configured to intercept 
inputs from a user that are directed to an application other than a user authentication application 
(see, e.g., slides 12 and 27), wherein the data interception unit is configured to passively collect 
at least one of mouse movement data, mouse point and click data, and mouse drag and drop data 
(see, e.g., slide 4); a behavior analysis unit operatively coupled to said data interception umt to 
receive the passively collected mouse data (see, e.g., slides 11, 12 and 14-1 8); and a behavior 
comparison unit operatively coupled to said behavior analysis unit (see, e.g., the User 
Identification Stage shown and described at, e.g., slides 12, 18-25), wherein said system 
dynamically monitors and passively collects behavioral biometric information, and translates 
said behavioral biometrics information into representative data, stores and compares different 
results, and outputs a user identify result (see, e.g., slides 21-25). 

2 1 . Before April 2, 2003, a behavioral biometrics-based use verification system for 
use with a mouse input device having the features of claim 26 as recited in the referenced 
application existed and worked for its intended purpose (see Exhibit A). In particular, the system 
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made and tested before April 2, 2003, comprised: a data interception unit for receiving inputs 
from a user that are directed to an application other than a user authentication application (see, 
e.g., slides 12 and 27), wlierein tlie data interception unit is configured to transparently collect at 
least one of mouse movement data, mouse point and click data, and mouse drag and drop data 
generated in response to the user (see, e.g., slide 4); a behavior analysis unit operatively coupled 
to said data interception unit to receive the transparently collected mouse data (see, e.g., 
slides 11 , ] 2 and 14-18); and a behavior comparison unit operatively coupled to said behavior 
analysis unit (see, e.g., the User Identification Stage shown and described at, e.g., slides 12, 18- 
25) wherein said system dynamically monitors and passively collects behavioral biometric 
information, and translates said behavioral biometrics information into representative data, stores 
and compares different results, and outputs a user identify result (see, e.g., slides 21-25). 

22. Before April 2, 2003. a method of characterizing a user having the features of 
claim 28 as recited in the referenced application existed and worked for its intended purpose (see 
Exhibit A). In particular, the method tested before April 2, 2003 comprised tlae method recited 
above at paragraph 9, wherein the signature for the user is based on a distribution of travelled 
distances (see, e.g., slides 5-10), 

23. Before April 2, 2003, a method of characterizing a user having the features of 

claim 29 as recited in tlie referenced application existed and worked for its intended purpose (see 
Exhibit A). In particular, the method tested before April 2, 2003 comprised the method recited 
above at paragraph 9, wherein the passively collected mouse data includes mouse movement data 
(see, e.g., slides 4 and 5). 

24. Before April 2, 2003, a method of characterizing a user having the features of 
claim 30 as recited in the referenced application existed and worked for its intended purpose (see 
Exhibit A). In particular, the method tested before April 2, 2003 comprised the method recited 
above at paragraph 9, wherein the passively collected mouse data includes mouse point and click 
data (see, e.g., slides 3 and 28-28). 
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25. Before April 2, 2003, a method of characterizing a user having the features of 
claim 3 1 as recited in the referenced application existed and worked for its intended puipose (see 
Exhibit A). In particular, the method tested before April 2, 2003 comprised the method recited 
above at paragraph 9, wherein the passively collected mouse data includes drag and drop data 
(see, e.g., slides 3 and 28-28). 

26. All statements made herein and of our own knowledge are true and all statements 
made on information are believed to be true; and further, these statements were made with the 
Icnowledge that willful false statements and like are punishable by fine or imprisonment, or both, 
under Section 1 001 of Title 1 8 of the United States Code, and that any such willful false 
statements made may jeopardize the validity of the application or any patent issuing thereon. 





Ahmed El-Sayed Ahmed 



Date 



Issa Traore 




Date 
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